Behavioral task
behavioral1
Sample
5ccffb3ba5b9542d6bd0572a826a171e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ccffb3ba5b9542d6bd0572a826a171e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ccffb3ba5b9542d6bd0572a826a171e_JaffaCakes118
-
Size
185KB
-
MD5
5ccffb3ba5b9542d6bd0572a826a171e
-
SHA1
a47078539cd756a6865030fb3adabf17a9bb54c7
-
SHA256
b5b07fb26c8b32c8ff975105450f87424b1f128dee1a7f73905aa48a314f8542
-
SHA512
27a6e19534fa10aa21094823ea9e2ae557759c0a7cb43320d4581d01f9ce180f58eba2f9022d02a87bbf8ead2749b347287a4c87624045a984c81718da68a84d
-
SSDEEP
1536:VMN8kPs1WF/OFcpEynrtkMi8GAW3X6JGS4hCFqVTuX47+ay5uXe:yNgWoGp5nrdViPvhCIVTuo7+ay5uXe
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ccffb3ba5b9542d6bd0572a826a171e_JaffaCakes118
Files
-
5ccffb3ba5b9542d6bd0572a826a171e_JaffaCakes118.exe windows:7 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE